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ABSTRACT 


Petri  nets  are  presented  as  a  technique  for  representing 
computer  systems  Having  asynchronous,  concurrent  operations. 
Tne  structure  of  tne  nets  are  analyzed  as  a  means  of 
demonstrating  the  correctness  of  tne  modeled  system.  Tne 
execution  of  tne  petrl  net  is  considered  as  a  stochastic 
process,  allowing  analysis  of  tne  model  as  a  queueing 
networh  system  by  transforming  tne  petri  net  into  Its 
stochastic  equivalent  net.  It  is  shown  tnat  product  form 
solutions  for  the  state  probabilities  exist  for  tne  class  of 
state  machine  decomposable  nets  but  not  for  tne  more  general 
class  of  consistent  petri  nets.  Solutions  for  the 
corresponding  open  systems  are  derived  by  extending  tne 
petri  net  model  to  Include  arbitrary  sources  and  sinhs. 
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I.  INTRODUCTION 

With  tne  explosion  in  numbers  and  types  of  computer 
hardware  components  witnessed  in  tne  past  few  years, 
computer  system  design  aas  become  an  extremely  complex  task. 
Cor  has  observed  [1]  : 

"Today's  computers  are  among  the  most  complex  man  made 
systems  in  existence  today.  The  development  of  such 
systems  represents  a  significant  commitment  of  physical 
and  mental  resources.  This  cost  can  only  be  justified  if 
these  computing  devices  serve  their  intended  purpose  — 
the  efficient  processing  of  data  in  response  to  specific 
needs." 

If  we  are  to  make  effective  use  of  these  development 
resources,  it  is  necessary  to  provide  the  system  designer 
with  tools  which  allow  him  or  her  to  create  and  analyze 
sophisticated  system  designs. 

Several  trends  have  emerged  which  have  accelerated  the 
searcn  for  new  and  better  design  tools.  The  low  cost  of  LSI 
and  VLSI  hardware  components  coupled  with  technological 
advances  in  digital  communications  nas  led  to  the  evolution 
of  a  wide  variety  of  multiprocessor  systems,  distributed 
computing  applications,  and  computer  networks,  is  early  as 
1976,  Anderson  and  Jenson  [2J  identified  27  different 
networking  schemes  being  used  in  prototype  or  actual 
systems.  Vhen  one  considers  the  number  of  communication 
protocols  and  transmission  media  which  have  been  proposed  or 
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implemented,  the  number  of  variables  involved  in  tne 
hardware  design  process  becomes  truly  awesome. 

Likewise,  Innovations  in  system  software  aave  given  rise 

to  such  concepts  as  distributed  operating  systems,  on-line 

data  bases,  and  interactive  programming,  to  name  a  few. 

Kobayashl  and  Conneim  [3j  have  noted  that: 

"With  the  increasing  complexity  and  sophistication  of 
computer  communication  systems,  rpodellng  and  performance 
evaluation,  [emphasis  their's]  are  becoming  critical 
issues  in  the  design  and  operation  of  such  systems.  It 
is  apparent  that  for  a  cost-effective  design  we  must  be 
equipped  with  systematic  methods  of  predicting 
quantitative  relations  between  system  resource 
parameters,  system  workloads,  and  measures  of  system 
performance." 

Several  characteristics  of  these  systems  may  be 
identified  which  determine  what  types  of  models  are 
appropriate  for  performance  evaluation.  &  central  concept  is 
that  of  concurrent  or  parallel  processing.  Each  node  in  a 
network,  or  processor  in  a  multiprocessing  system,  is 
capable  of  independent  computation.  At  the  same  time,  system 
or  global  resources  such  as  memory  and  communication  links 
must  be  shared  by  the  various  processing  elements.  Tnis 
results  in  enforced  cooperation  between  otherwise 
Independent  processes. 

Since  most  resources  in  computing  systems  tend  to  be 
scarce  in  relation  to  the  demands  on  them,  contention  exists 
between  resource  users  which  must  be  arbitrated.  This 
problem  is  complicated  by  the  observation  that  demands  in 
computer  systems  are  not  constant.  For  example,  in  computer 
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communication  networks  empirical  evidence  snows  that  demands 
tend  to  be  bursty  and  sporadic.  As  a  result,  resource 
demands  must  be  viewed  as  stochastic  In  nature  and  system 
models  must  be  capable  of  expressing  tne  probabilistic 
elements  of  tne  modeled  system. 

The  uncertainty  In  resource  demand  results  in  two 
phenomena  which  must  be  considered  in  performance  raodelinr. 
Tne  first  is  tne  creation  of  queues  of  users  whicn  require 
service  but  must  wait  for  resource  availability.  The  second, 
and  interrelated,  phenomenon  is  the  delay  which  users 
experience  while  waiting  for  resources  and  while  being 
served.  The  field  of  queueing  theory  has  attempted  to  answer 
tnese  questions  and  others  concerning  tne  probabilistic 
properties  of  systems  in  both  analytic  and  simulation 
models. 

One  purpose  of  performance  prediction  modeling  Is  to 
analyze  system  designs  in  terms  of  performance  measures  or 
Indices.  Ferrari  [4j  has  Identified  three  performance  index 
classes:  productivity,  responsiveness,  and  utilization.  A 
number  of  specific  measurements  may  be  computed  from  the 
model  to  express  tnese  indices  —  throughput,  waiting  time, 
and  utilization  for  example. 

A  second  purpose  of  performance  modeling  is  to  verify 
proper  system  operation.  It  is  important  to  ensure  tnat  tne 
underlying  system  is  deadlock-free,  or  at  least  to  predict 
the  circumstances  under  which  deadlock  could  occur.  In 
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addition,  it  may  be  necessary  to  demonstrate  that  the  system 
enforces  synchronisation  or  mutual  exclusion  among  elements 
of  the  system. 

It  is  not  sufficient  for  a  model  to  be  capable  of 
providing  answers  to  these  questions.  The  model  must  also  be 
amenable  to  validation;  that  Is,  the  determination  of  how 
accurately  the  predicted  results  conform  to  tne  modeled 
system.  This  may  be  particularly  difficult  to  accomplish 
when  the  actual  system  does  not  exist  or  is  otherwise  not 
available.  Finally,  it  is  desirable  tnat  the  model  be  robust 
in  order  tnat  its  domain  of  validity  extend  over  as  large  a 
range  of  systems  as  possible. 

Performance  models  can  be  divided  into  two  separate 
types  ~  simulation  and  analytical,  A  simulation  may  taite 
various  forms?  nowever,  the  form  most  often  associated  with 
performance  modeline  is  computer  based,  discrete  event 
simulation.  This  model  consists  of  a  program  which  describes 
the  state  of  the  modeled  system  in  terms  of  system  entitles 
and  their  attributes  at  each  point  in  time.  Attributes  are 
varied  as  a  result  of  tne  instantaneous  occurrence  of  events 
in  the  system.  The  model  then  tracts  the  changes  in 
attributes  over  time  to  determine  the  required  performance 
measures.  Simulations  suffer  from  several  shortcomings.  To 
accurately  model  the  system,  the  programs  must  be  complex 
resulting  in  a  significant  software  engineering  problem?  the 
model  must  be  carefully  designed  and  verified  to  ensure 
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proper  operation.  Because  of  tne  probabilistic  nature  of  tne 
system,  it  is  necessary  to  operate  the  simulation  for 
numerous  runs  and  over  a  large  span  of  simuation  time  to 
ensure  statistically  meaningful  results.  This  can  lead  to 
significant  computing  costs  for  the  simulation.  Finally,  if 
tne  system  parameters  are  to  be  cnanged,  or  elements  of  tne 
system  altered,  it  is  necessary  to  change  the  simulation  and 
rerun  it.  Once  again,  tne  costs  of  software  modification  and 
model  operation  must  be  met.  This  can  maice  it  difficult  to 
generalize  or  abstract  from  the  simulation. 

An  alternative  to  simulation  modeling  is  analytic 
modeling.  In  this  method  the  system  is  expressed  as  a  set  of 
mathematical  equations.  Determining  tne  performance  measures 
for  the  system  amounts  to  finding  the  appropriate  solutions 
to  tne  system  equations.  Unfortunately,  in  many  cases  the 
solutions  are  mathematically  intractable  or  computationally 
inefficient  and  require  that  simplifying  assumptions  be  made 
about  the  system.  However,  to  quote  from  Kobayashi  and 
Konheim  once  again: 

"Even  when  a  decision  is  made  for  simulation,  an 
analytic  solution,  however  crude  it  may  be,  can  serve  as 
a  guideline  in  narrowing  down  a  range  of  system 
configurations  and  parameters  under  which  a  simulation 
runs.  It  also  could  save  a  considerable  amount  of 
modeling  efforts,  by  detecting  possible  errors 
Introduced  in  the  design  and  Implementation  phases  of  a 
simulation." 

This  thesis  investigates  an  approach  to  the  analytic 
modeling  of  computer  systems  based  on  using  a 
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graph-theoretic  technique  —  petrl  nets  —  as  a 
representation  for  system  elements  and  tneir  Interactions. 
By  analyzing  tne  structure  of  a  petrl  net  model.  It  is 
possible  to  answer  a  number  of  questions  regarding  tne 
operation  of  tne  modeled  system.  We  snow  that  it  Is  possible 
to  model  tne  stocnastic  nature  of  computer  systems  by 
extending  tne  petrl  net  model  to  allow  nondeterminism  in  the 
net  to  be  expressed  in  terms  of  probability  distributions. 
It  Is  then  possible  to  consider  a  petrl  net  as  an  analog  to 
a  queueing  network  system  and  therefore  It  Is  possible  to 
apply  the  known  methods  of  Markov  analysis  to  tne  nets  to 
obtain  analytic  solutions  for  the  system.  The  problem  we 
address  in  tnis  thesis  is  tne  evaluation  of  nondetermlnistlc 
and  stochastic  petrl  nets  using  queueing  theory  techniques. 
Tne  solutions  which  result  combine  tne  structural  properties 
of  petrl  nets  with  the  capability  for  performance 
prediction. 

A.  PETRI  NETS  AS  A  PERFORMANCE  MODEL 

Consider  a  simple  computer  system  consisting  of  two 
cooperating,  concurrent  processes  A  and  B  running  on 
separate  hardware.  Process  A  Is  a  producer,  and  process  B  is 
a  consumer  of  data.  It  Is  desired  that  a  nandsnake  protocol 
be  Implemented  between  the  two  processes  (see  Figure  1.1). 
How  might  this  be  represented? 


One  possibility  Is  to  list  the  events  which  must  occur 


during  tne  handshake  process.  Using  this  event  list,  we 
could  then  determine  what  conditions  must  be  satisfied  for 
each  event  to  occur,  and  wnat  cnanges  in  the  system  result 
from  that  occurrence.  This  could  be  graphically  displayed  In 
the  following  manner.  Let  the  events  be  represented  by  a 
bar,  and  tne  conditions  by  circles.  For  each  event,  draw  a 
directed  arc  from  each  circle  (condition)  which  must  hold 
for  the  event  to  occur  to  the  bar  (event).  Next,  draw  a 
directed  arc  from  the  bar  to  each  circle  (condition)  which 
holds  as  a  result  of  the  occurrence  of  the  event.  Finally, 
determine  tne  initial  state  of  the  system  by  deciding  which 
conditions  Initially  hold,  and  place  a  dot  (token)  In  a 
circle  for  each  holding  of  that  condition.  Tne  resulting 
graph  is  shown  In  Figure  1.2. 

This  graph  Is  called  the  petri  net  model  of  the 
communication  protocol,  after  C.  A.  Petri  who  first  studied 
them  In  tne  1950's  [5].  Note  that  each  event  may  have  one  or 
more  Input  conditions,  and  one  or  more  output  conditions.  In 
the  language  of  petri  nets,  the  events  are  called 
transitions  and  the  conditions  are  called  places ♦  The  net 
operates  by  moving  tokens  around  the  net  in  accordance  with 
the  firing  rule,  which  states  that  an  event  may  occur  when 
each  Input  place  to  the  event  nas  &  token  .assigned  to  it. 
The  transition  fires  by  removing  a  token  from  each  input 
place  and  depositing  one  in  each  output  place.  The  state  of 


PROCESS  A 


PROCESS  B 


send  to  ready  10 

output  buffer  receive 


Figure  1.2  Petri  net  model  of  a  communication  protocol 


each  place  is  determined  by  the  number  of  tokens  in  it.  The 
system  state,  or  marking,  is  then  represented  by  a  vector 
whose  elements  are  the  state  of  each  place  in  the  net. 

One  feature  of  the  petri  net  model  is  that  the  tokens 
can  represent  either  control  flow  or  data  flow;  tne 
difference  purely  lies  in  how  the  net  is  interpreted  by  the 
designer.  This  has  led  to  some  difficulty  in  modeling 
data-dependent  events.  Several  attempts  have  been  made  to 
overcome  this  problem  by  extending  the  definition  to  include 
specialized  places  such  as  conditional  places,  which  cause 
transitions  to  fire  in  different  ways  depending  on  whether 
or  not  the  condition  place  bolds  a  token.  In  either  case  tne 
token  content  of  tne  conditional  place  is  not  changed  by  the 
firing,  in  example  of  this  extension  is  tne  Macro  E-Net  Noe 
and  Nutt  have  proposed  [6].  In  a  slightly  different 
extension,  inhibitor  places  were  added  to  the  net  [7J  which 
prevent  firing  of  a  transition  when  the  place  nolds  a  token. 

A  second  feature  of  petri  nets  is  that  the  firing  of 
transitions  is  inherently  asynchronous  and  concurrent  —  for 
example  in  Figure  1.2  the  <process  data>  events  for  both 
processes  can  fire  independently  of  each  other.  When 
necessary,  the  operation  of  concurrent  processes  can  be 
coordinated  through  the  use  of  multiple  input  places;  the 
<receive  message>  event  is  an  example  of  this  type  of 
interaction. 
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The  basic  petri  net,  as  depicted  here,  does  not  attempt 
to  model  tne  time  required  for  execution.  Extensions  to  tne 
theory  which  account  for  execution  times  were  investigated 
by  Ramcnandanl  [8]  and  others.  This  technique  allows  for 
analysis  of  tne  time-related  operation  of  tne  net. 

1.  Analysis  of  petri  nets 

Petri  nets  may  be  analyzed  in  a  number  of  ways.  Much 
of  the  worlc,  particularly  at  MIT,  has  been  based  on  usine 
techniques  from  automata  theory  and  Investigating  the  nets 
as  formal  language  generators  [9,  10J .  Using  this  method, 
Hacir  has  proven  a  number  of  decidability  questions  about  the 
possible  configurations  (system  states)  of  the  net.  Other 
worlc  [11,12,13]  has  emphasized  the  graph  theoretical 
properties  of  the  nets  In  analyzing  their  structure.  This 
methodology  nas  led  to  tne  Identification  of  several 
subclasses  of  petri  nets  based  on  special  structural 
characteristics . 

Simulations  eased  on  petri  net  models  have  been  widely 
used  In  analyzing  hardware  designs  of  concurrent  systems  and 
data  flow  computing.  Typically,  the  system  to  be  modeled  Is 
reduced  to  its  petri  net  equivalent  which  then  serves  as 
Input  to  the  simulator.  The  simulator  then  executes  the 
petri  net  In  much  the  same  manner  as  a  conventional  discrete 
event  simulation. 
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Petri  nets  nave  been  used  to  model  a  large  number  of 
concurrent  software  and  Hardware  systems.  In  hardware 
design,  they  nave  been  used  as  a  basis  for  developing  speed 
independent  logic  [14,15]  by  provine  the  conditions  for 
which  circuits  are  free  of  races  when  operating  in 
fundamental  mode.  More  ambitious  applications  have  involved 
the  analysis  of  multiprocessor  systems  such  as  the  CDC  6600 
[16,17J  ,  IBM  360/91  [18J  ,  Amdaal  470  7/6  [17J  ,  and  US  Navy 
SEAFIRE  weapons  system  [19].  Most  of  these  applications  have 
involved  simulation  modeling  due  to  tne  complexity  of  the 
designs.  A  slightly  different  approach  to  hardware  design 
has  been  the  design  by  step-wise  refinement  metnod.  Valette 
[2«]  nas  shown  that  single  transitions  could  be  replaced  by 
more  complex  structures  wnen  certain  conditions  were  met. 
Using  this  method,  each  component  of  the  system  can  be 
separately  analyzed  and  formed  into  an  independent  structure 
he  called  a  well-formed  blocA.  By  substituting  tnese  bloctcs 
for  transitions  in  tne  net.  It  is  possible  to  retain  tne 
properties  of  the  original  net.  This  hierarchical  structure 
also  simplifies  the  problem  of  understanding  the  operation 
of  the  net.  Figure  1.3  shows  how  this  might  be  accomplished. 

Petri  net  models  have  been  used  in  the  analysis  of 
software  designs  as  well.  For  example,  they  nave  been  used 
to  verify  the  correctness  of  communication  protocols  [21]  . 
Operating  system  synchronization  primatives  such  as  P  and  7 
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[22]  may  be  modeled  using  simple  net  structures.  Figure  1.4 
gives  an  example  of  now  mutual  exclusion  could  be 
represented.  The  contents  of  place  S  is  the  semapnore  value 
for  the  protected  resource  (in  this  case  1).  Each  process 
which  requires  exclusive  use  of  tne  resource  nas  an  event 
P(S)  which  may  fire  only  if  the  semaphore  is  non-tero. 
Firing  of  tne  corresponding  V(S)  event  returns  tne  toiien  to 
the  semaphore.  The  significant  advantage  of  using  a  petri 
net  is  that  mutual  exclusion  can  he  proven  by  showing  that 
only  one  P(S)  event  can  be  fired  until  tne  corresponding 
V (S )  event  occurs  . 

Lest  the  reader  get  the  impression  that  petri  nets  are 
the  ultimate  modeling  tool,  it  should  be  noted  that  petri 
nets  have  limitations  in  their  modeling  ability.  Tne  lack  of 
a  mechanism  for  handling  data  dependent  events  as  described 
earlier  nas  made  it  difficult  to  model  actual  systems  using 
deterministic  nets.  A  second  related  limitation  is  the  use 
of  deterministic  transition  firing  times  in  the  analysis  cf 
timed  nets.  In  our  opinion,  the  restriction  of  petri  nets  to 
deterministic  modeling  has  been  responsible  for  the  lac*  of 
attention  given  to  tnem  in  recent  years. 

Our  view  of  petri  nets  emphasises  the  non-deterministic 
modeling  capabilities  of  tne  nets.  We  consider  the 
transitions  in  the  net  to  be  service  centers  which  operate 
according  to  some  service  time  distribution.  In  this 
approach,  the  places  can  represent  queues  of  tokens  awaiting 
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service.  By  regarding  nets  In  tnls  manner,  tne  Known  results 
of  queueing  network  tneory  may  be  applied  to  tne  analysis 
while  maintaining  the  benefits  of  tne  underlying  structure 
of  tne  nets.  We  feel  tnat  tnls  will  result  in  a  better 
modeling  tool  for  analyzing  concurrent  systems. 

B.  REVIEW  OF  RELATED  WORK 

The  basis  for  concurrent  system  modeling  has  largely 
been  derived  fron  two  papers  by  Karp  and  Miller  [24,25] . 
These  papers  proposed  several  models  for  concurrent  systems. 
Computation  grapns  are  slmular  to  petri  nets  except  tnat 
places  were  modeled  as  directed  arcs  between  events  and 
labeled  with  a  four-tuple  defined  as: 

A  —  tne  Initial  number  of  words  in  a  FIFO  queue 
0  —  the  number  of  words  added  to  tne  queue  as  a  result 
of  tne  firing  of  tne  Input  transition 

W  —  the  number  of  words  removed  from  tne  queue  as  a 
result  of  the  firing  of  the  output  transition 

T  —  a  threshold  number  of  words  (perhaps  greater  than 
W)  required  for  tne  output  transition  to  fire. 

Karp  and  Miller  established  the  requirements  for  several 
Important  concepts  including  liveness  and  boundedness  wnicn 
we  discuss  In  greater  detail  later. 

Reiter  [26]  extended  computation  graphs  by  adding  a 
fifth  element  tau  to  the  directed  arc  labeling  which 
represented  the  execution  time  required  for  the  output 
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transition  to  process  tne  W  data  words  wnen  firing.  Reiter 
tnen  determined  a  metnod  for  finding  possible  sequences  of 
firings  of  transitions.  For  cyclic  graphs,  he  found  a  lower 
bound  for  tne  cycle  period  of  tne  graph.  Computation  graphs 
have  been  used  in  the  performance  analysis  of  data  flow 
processors  [27] . 

The  second  paper  by  Karp  and  Miller  [25J  investigated 
parallel  program  schemata  ana  vector  addition  systems.  A 
parallel  program  scnema  modeled  parallelism  in  programs  by 
establishing  computation  states  and  rules  for  state 
transitions.  Tne  concept  of  FORK  and  JOIN  wnich  have  been 
applied  to  data  flow  and  other  MlMD  architectures  was 
developed  to  express  the  creation  of  concurrent  processes 
from  a  sequential  process,  and  the  combination  of  concurrent 
processes  into  a  sequential  process.  The  equivalence  of 
petrl  nets,  computation  graphs,  and  parallel  program 
schemata  was  shown  by  Miller  [28J . 

Most  of  the  research  on  petri  nets  in  tne  United  States 
has  been  conducted  at  MIT.  Commoner  and  Bolt  [ll,12j  studied 
a  deterministic  subclass  of  petri  nets  Known  as  marked 
graphs  and  proved  several  tneorems  regarding  tneir  system 
state  spaces.  A  more  general  subclass  of  deterministic  nets, 
persistent  nets,  was  studied  by  landweoer  and  Robertson  [13J 
who  proved  that  the  theorems  regarding  marked  graphs  were 
applicable  to  this  class.  A  final  deterministic  subclass 
referred  to  as  state  machine  decomposable  was  investigated 
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by  Ramchandanl .  In  addition,  Ramcnandanl  analyzed  tills 
subclass  with  deterministic  transition  firing  times  to 
derive  expressions  for  tne  minimum  net  cycle  period  in  a 
manner  analogous  to  mat  Reiter  used  for  computation  graphs. 

Other  classes  of  petri  nets  nave  been  defined  which 
Improve  tne  tractability  of  tne  problem  of  finding  solutions 
to  performance  measures  while  retaining  characteristics 
which  are  desired  in  the  modeled  systems.  In  particular, 
live,  bounded,  conservative,  and  consistent  nets  nave 
received  tne  most  attention.  The  properties  of  tnese  classes 
will  be  examined  in  detail  in  tne  next  section. 

Our  worn  extends  this  previous  worn  by  focusing  on  the 
broader  class  of  nondeterministlc,  consistent  petri  nets 
which  appears  to  be  the  most  general  class  for  which 
solutions  to  performance  questions  may  be  found.  While 
nondeterminism  Increases  the  difficulty  of  dealing  with 
petri  nets  analytically,  much  of  tne  previous  worfc  on  petri 
net  structure  remains  pertinent  to  this  class. 
Nondeterminism  allows  tne  net  to  represent  different  types 
of  data,  for  example,  by  regarding  the  data  type  or 
transition  firing  time  as  a  random  variable.  To  analyze  the 
performance  of  nondeterministlc  petri  nets,  we  consider  tnem 
as  analogs  to  queueing  network  models.  The  basis  for 
analysis  of  these  models  is  the  classic  wors  of  Jaclcson  [29] 
for  tne  case  of  open  systems,  and  Gordon  and  Newell  [30]  for 
closed  systems.  Both  of  these  models  relied  upon  polsson 
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arrival  processes,  first  come,  first  serve  (FCFS)  queueing 
discipline,  and  exponential  service  departure  processes  to 
ensure  tnat  tae  Marxov  property  was  met  and  allowed  tbe 
system  state  probabilities  to  be  expressed  as  the  product  of 
tne  marginal  state  probabilities.  This  quality  is  Known  as 
the  product  form  solution  and  is  required  for 
computationally  efficient  solutions.  Most  of  the  recent  woric 
in  queuing  network  theory  nas  attempted  to  find  product  form 
solutions  for  more  general  systems.  Jacfcson  131]  considered 
systems  wnere  tne  arrival  rates  and  service  rates  were 
functions  of  the  queue  lengths  (states)  at  the  various 
nodes.  Bastett  et  al.  [32]  extended  this  to  open  and  closed 
networks  where  customers  were  of  different  classes  and  tne 
queueing  discipline  was  FCFS,  no  queueing,  and  last  come, 
first  serve  witn  preemptive  resume  (LCFS-PR).  ill  tnese 
cases  were  shown  to  have  product  form  solutions.  In 
addition,  they  showed  that  a  condition  Known  as  local 
balance  was  a  necessary  condition  for  product  form 
solutions . 

Chandy  et  al.  [33]  considered  the  question  of  local 
balance  in  more  detail  and  developed  the  more  general  notion 
of  station  balance  which  was  also  shown  to  be  necessary  and 
sufficient  for  product  form  solutions  if  non-exponential 
differentiable  service  distributions  were  used.  In  addition 
they  proved  that  arbitrary  service  distributions  satisfied 
station  balance  if  processor  sharing  (PS)  or  LCFS-FR 
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disciplines  were  used.  In  tne  case  of  exponential  service 
tine  distributions  for  all  service  classes,  tney  showed  that 
FCFS  and  priority  disciplines  resulted  in  station  balance 
being  met.  This  result  has  been  eitended  to  any  worh 
conserving  discipline. 

In  summary,  it  has  been  shown  that  product  form 
solutions  exist  for  queueing  networks  with  tne  following 
properties: 

1.  For  exponential  service,  any  wore  conserving  queueing 
discipline  may  be  used. 

2.  For  PS  and  LCFS-PR  disciplines,  any  differentiable 
service  distribution  may  be  used. 

3.  Tne  solutions  do  not  depend  on  tne  routing  used  for 
the  customers. 

C.  OUTLINE  OF  SUCCEEDING  SECTIONS 

In  Section  II,  we  present  the  formal  definitions  of 
petri  nets  and  derive  several  useful  properties.  The  state 
space  —  the  set  of  system  states  the  net  may  occupy  —  is 
determined  by  constructing  the  reachability  set  of  the  petri 
net.  The  conditions  under  which  the  state  space  is  finite 
and  recurrent  are  then  considered.  It  is  shown  that  nets 
with  certain  structural  cnaracteri sties  give  rise  to  tnese 
restricted  state  spaces.  In  particular,  the  classes  of 
mariced  graphs,  state  machines,  and  consistent  nets  are 
considered  because  of  their  relation  to  realizable  systems. 
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In  Section  III  we  turn  to  nets  vitn  timed  events.  Tne 


case  of  deterministic  routine  and  transition  time  is  first 
considered.  Next,  tne  (probabilistic)  class  of  state 
machines  with  nondeterministlc  routine  and  exponential 
transition  times  Is  examined.  It  is  shown  that  for  the  class 
of  state  machine  decomposable  nets  it  is  possible  to 
transform  tne  net  Into  a  stochastic  equivalent  net  which  is 
analogous  to  a  closed  queueing  network.  For  this  class  of 
nets  a  product  form  solution  for  the  state  probabilities  is 
derived. 

Next,  petrl  nets  which  allow  external  sinks  and  sources 
are  defined.  Again,  it  is  snown  tnat  tne  stocnastlc 
equivalent  nets  may  be  analyzed  as  queueing  networks;  In 
this  case  an  open  system. 

Finally,  the  class  of  consistent  petrl  nets  with 
exponential  firing  times  is  considered  and  it  Is  shown  that 
product  form  does  not  exist  for  this  class  of  nets. 


II.  PETRI  NET  THEORY 
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In  tnis  section  tne  relevant  petri  net  tneory  is  f 

I 

presented.  Much  of  the  worn  follows  tnat  of  Commoner  and  ' 

Holt  C 11 1  *  Kraft  and  Miller  125] ,  and  Ramcaandanl  [6] .  Tne 
notation  used  is  primarily  tnat  of  Peterson  [23] . 

The  petri  net  was  defined  informally  in  the  preceding 
section  as  a  means  for  representing  related  events  and  tneir 
conditions  in  systems,  We  now  formalize  this  notion  by 
defining  tne  petri  net  N  and  its  directed  graph  • 

representation.  j 

Definition  2.1  N  =  <P,T,I,0> 
where 

P  *  {p;  !  Pi  is  a  place  in  tne  net}  ] 

T  *  {tj  I  t;  is  a  Yfft^lti on  In  tne  net} 

I  :  ( P  ^ T )  — such  tnat  if  pt  is  an  input  place 
to  tj  .  I(p4«»tj  }  ^  1  and  0  otnerwise 
0  :  (P^T)  — > JV|  sucn  tnat  if  p^  is  an  output  place 
to  tj  .  0(pt',ty)  2l  1  and  0  otherwise 
wlta  tne  requirement  that  Vtt’  €  T  3Pj  »PH  €  P  ! 

Up/  .t<  )  ^  »  A  0(p^,tj;  )  /  0  and  Ypj  £P  j 

I(p j**i)  >  0  **>  0(pj  ,t£)  *  0 

1 

We  furtaer  define  tne  following  sets: 

•H  a  iP;  I  Up;  *tt)  > 

I 

i 
\ 
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t i*  »  {p j  i  0(pj  ,ti)  >  0>  where  ic  €  T  /\pyC  P 

and  likewise: 

*pj  =  {t £  !  0  ( p j  ,t^)  >  0} 

Pj»  *  {tt-  !  Kpj  ,  tt)  >  0}  where  tt-  €  T  A  Pj  €  P 

These  sets  are  referred  to  as  the  input  and  output  sets, 

respectively.  Note  that  the  definitions  of  tae  functions  I 
and  0  require  that: 

Vt£  €  T,  «tt*  <p  A  *£•  *  0  A  *tt'  U  ti*  *0 
The  set  of  places  represents  tae  conditions  in  our  informal 

model,  and  the  set  of  transitions  represents  tne  events.  Tne 

input  and  output  functions  specify  the  preconditions  for  an 
event  to  occur  and  the  results  of  the  event  occurrence. 

Corresponding  to  each  petrl  net  we  define  a  bipartite, 
directed  grapn  as  follows: 

Vpt*  P£  €  P  draw  a  circle  representing  a  place 

Vt£  ti  €  T  draw  a  vertical  bar  representing  a  transition 

Vt£  ,Pj  if  Pj  €  *t£  draw  a  directed  arc  from  p;-  to  t^ 

Vt*  tPj  if  Pj€*i*  draw  a  directed  arc  from  t*  to  p j 

Me  will  use  the  notions  of  petri  net  and  petri  net  graph 
interchangibly  (since  they  are  equivalent). 

Example  1. 

Consider  tae  following  petri  net  N  =  <P,T,I,0>  with 
P  *  {  P,  »  P*  *  Pj  *  P,  »  Py  *  P*  *  P7  > 

T  *  {  t,  ,  tjj  ,  t  J  ,  t^  ,  t  £  } 

let  n  »  [pj  and  m  *  {t^  .  Then  I  and  0  may  be 
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represented  ay  tne  n  X  m  incidence  matrices: 
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and  C0  « ,j  ■  0  ( p£  ,  t j  ) 

Tae  corresponding  petri  net  grapa  is  shown  in  Figure  2.1. 

If  ve  associate  vita  eaca  place  in  a  petri  net  n  a 

non-negative  Integer  marking  function  jLt  .  we  nave  tae 

following  definition  of  a  marked  petri  net  M: 

Definition  2.2  &  marked  netri  net  M  =  <P,T,I ,0,  JLL> 

waere  P.r.1,0  are  defined  as  before  and 
jLL:  P  —>N 

Each  function  defines  a  marking  of  tae  net.  In  graph 

notation  the  petri  net  eraph  is  extended  to  a  marked  petri 

net  graph  by  aiding  tokens  to  places  as  follows: 

Vpt"  (•  p*  /J#K(p t  )  =  Q  tnen  place  n  tokens  (dots)  on 

place  pt* . 

Figure  2.2  snows  a  possible  marking  for  tne  petri  net  of 
Example  1.  Clearly  a  (countably)  infinite  number  of  possible 
markings  exist  for  any  petri  net.  Tais  marking  represents 
the  (possibly  multiple)  holdings  of  conditions  at 
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some  Instant  of  execution  and  may  be  viewed  as  a  description 
of  the  state  of  tne  net. 


Definition  2.3  A  transition  t  is  enabled  Iff 
Vp j  Pj  €  *“>  fX(  Py )  £  Kpj.t;) 

For  eacn  marking  jllk  we  can  define  tne  enabling  set  SK  as 
follows : 

Definition  2.4  Tne  enabling  set  SfclC  T  =  {t^  !  t;  is 
enabled  by  marking  . 

In  our  grapn  notation,  a  transition  is  enabled  if  eacn  arc 
directed  into  tne  transition  bas  a  token  in  its  originating 
place.  Referring  to  Figure  2.2,  it  will  be  seen  tnat  t,»  tt, 
and  t*  are  enabled  and  tnerefore  *  {t,  ,  t£,  t^,  }. 

Transition  t3  is  not  enabled  since  tnere  is  no  token  in 
place  pj.  corresponding  to  tne  arc  p^  — >  x^. 

An  enabled  transition  may  fire  to  create  a  new  marking. 
Tnat  is,  we  define  a  function: 

Definition  2.5  A  firing  function  for  a  marked  net  M  Is 
F  :JUL  Xs  — >  fX  sucn  tnat  F ( P j  ) .  t ^ )  =  jLL^Pj)  - 
I(  Pj  .tj)  ♦  QiVjfXi  )  * 
wnere  pj  €  P  A  tt-  ^  S  v 

F  is  defined  for  all  markings  for  wnicn  tne  set  SK  is 
non-empty.  Continuing  witn  the  vector  notation  introduced 
earlier  for  tne  functions  I  and  0,  we  may  denote  eacn 
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margin*  jjL*  as  an  n-element  vector  UK  where  n  =  |  pj  and 

UK(1)  3 /XK  (p i)  for  1  *  1,2 . .  .  Tnen  F  may  be  expressed 

as : 

F(UK,t;  )  =  0K  -  +  C0*  where  Cj  1  and  C0«I  are  tne  1th 

columns  of  the  input  and  output  Incidence  matrices 
respectively. 

Definition  2.6  margin?  Is  directly  reachable  fromjj.klf 
(t4-  €Sk)  A  F(^L^ti)  and  Is  denoted  as: 

Returning  to  our  earlier  example,  transition  tz  may  be  fired 
(recall  that  tne  enabling  set  Sk  *  It,  ,  \z,  t*  }  ).  Ey 

Inspection  of  Figure  2.2,  we  specify  tne  vector  for  marking 

M* 


Tne  resulting  marking  fjLK4l 


°k  **  Cj*  ♦  C qz. 


In  graph  notation,  one  token  Is  removed  from  eacn  place 
having  an  arc  directed  Into  the  firing  transition,  and  one 
token  is  added  to  each  place  having  an  arc  directed  from  the 
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firing  transition.  Tne  resulting  marxing  is  shown  In  Figure 
2.3. 

Next  we  consider  sequences  of  transition  firings.  Assume 
tne  following  firings  exist  for  some  marked  net  M : 

Tnen  we  denote 

or  JJ.=>JJLZ 

where  tne  firing  sequence  oris  some  sequence  of  transition 
firings  ( tj  ttgt...(tn). 

Definition  2.7  Marking  Is  reachable  from  marlring  iff 

3  O’*  =>  •  •  •  ®  >  M-| 

wnere  CT*  (t,  ,t*,...,t„) 

If  we  form  the  reflexive,  transitive  closure  of  tne 
transition  firing  relation  we  nave  tne  following  definition: 

Definition  2.8  Slven  a  marxed  net  M,  the  reachability  set 
Q(M)  Is  defined  Inductively  as: 
basis:  LL„  €  Q 

ti 

Induction: /JLte  €  qA  3v  €  T  !  ==>  jU.^4  €  0 

We  are  Interested  In  determining  the  elements  of  the  set 
Q(i).  To  do  so,  we  must  first  formalize  tne  previously 
Introduced  vector  notation  as  a  vector  addition  system. 


35 


A.  VECTOR  ADDITION  SYSTEMS 


The  concept  of  vector  addition  systems  was  first 
explored  by  tarp  and  Miller  [25J .  This  section  is  largely 
derived  from  their  wore. 

A  vector  addition  system  is  defined  as  a  pair  V  =  (d,W) 
where  d  is  an  r-dimensional  vector  with  and  W  Is  a 

finite  set  of  r-dimensional  vectors  w,  ,  wa . w„  with 

Wj(i)€I.  The  readability  set  R(V)  for  a  vector  addition 
system  is  the  set  of  vectors  composed  by  adding  elements  of 
tne  set  V  to  d.  Tiiat  is 

R(V)  *  (x  !  x  =  d  +  (w,  ♦  w4  ♦  ...  +  w„  )  A  x(i)^0  }. 
In  addition,  tne  following  terminology  is  used: 

The  relation  Jfa  is  defined  as 
x  <  7  <->  for  1  *  1,2,... ,r  x(l)  &  y(l) 

The  symbol  Gjis  defined  such  that  if  n  is  any  integer, 

GJ  >  n  and  n  +  GJ  =CJ. 

The  reachability  set  R ( F )  can  be  determined  by  constructing 
tne  corresponding  reachability  tree  T(7).  Nodes  in  tne  tree 
consist  of  r-dimensional  vectors  x,y,z,...  with 
x(i)€H  UtCJ},  for  1  *  1,2,  ...,r  .  The  relation  •<  is  defined 
as  i  «<  y  <*>  a  directed  path  exists  from  x  to  y  in  T(V).  Let 
d  be  the  root  of  the  tree.  Descendants  are  constructed 
recursively  as  follows: 

1.  If  x  K  y  and  x  ■  y,  y  is  a  leaf  node. 

2.  Otherwise,  construct  successor  nodes  to  y  with 

vectors  y  ♦  w,  ,  y  +  ws ,  ...  ,  y  +  w^  where  for  i  = 


1,2,. ...r  y(l)  +  wj(l)^0.  In  addition,  if  there  exists 
a  node  z  sued  that  z  •<  y  and  z^.y  ♦  wi  and  z(J)  < 
y(J)  +  wt*( J)  for  some  j,  tnen  y(j)  +  w^(j)  =  GJ. 

To  Illustrate  the  construction  of  this  tree  consider  the 
following  example  from  [25J : 

Example  2. 

Let  ?  *  (d,W)  wnere 
d  *  [1,0, 0,0,0] 

W  »  {  [-1,1, 0,0,0]  ,  [-1,0, 0,1,0]  ,  [0,-1, 2, 0,0]  , 
[0,1, -1,0,0]  ,  [0,0, 0,-1, 2]  ,  [0,0,0, 1,-1]  > 
Tne  resulting  reachability  tree  is  shown  in  Figure  2.4. 

The  following  theorems  from  [25]  allow  us  to  answer 
decidability  questions  about  rector  addition  systems  by 
inspecting  the  reachability  tree. 

Theorem  2.1 

Vi3r  !  y  €R(?)A  (x  £  y)  <=>  z  !  z  €  t  (v)  A  (x5:  z) 

The  proof,  while  straight  foward,  is  rather  lengthy  and  so 
Is  not  Included  here,  but  may  be  found  in  [25]. 

Theorem  2.2  For  any  vector  addition  system  V,  T(¥)  is 
finite. 

We  first  show  the  following  two  lemmas: 


Figure  2.4.  Reacaability  tree  for 
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,  O  ) - (  O  ,0 , 0 , 0, 2  } — ( 0 
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Lemma  2.2.1 

Let  p,  ,p„*ps,  ...,p„,  ...  be  an  infinite  sequence  of 
elements  of  (Jsf  Uk*J)  *  Then  there  exists  an  infinite 
subsequence  Pa *Pt *PC ♦ • • * »Pa  ♦  •  •  *  sucn  tnat 

Pa^»  •  •  Pi?£*  •  *  • 

Proof.  Construct  an  infinite  subsequence  by  selecting 
elements  with  first  entries  nondecreasing.  From  tnis 
sequence,  construct  an  infinite  subsequence  with  second 
entries  nondecreasing,  and  so  on. 

Lemma  2.2.2  (K'dnig  Infinity  Lemma)  Let  T  be  a  tree  such 
tnat  each  vertex  has  a  finite  number  of  successors  and 
there  exists  no  infinite  directed  path  from  the  root. 
Then  T  is  finite. 

Proof.  Since  eacn  vertex  nas  a  finite  number  of 
successors,  let  n  be  the  maiimum  number  of  successors 
for  any  node.  Then  tnere  are  at  most  n  paths  of  length  1 
from  the  root,  and  if  p  is  some  node  in  the  tree,  there 
are  at  most  n  paths  of  length  1  in  the  subtree  having  p 
as  its  root.  Since  no  infinite  patn  exists  by 
assumption,  let  m  be  tne  maximum  path  length.  Then  the 
maximum  number  of  nodes  is  n"1  and  T  is  finite. 

Proof  of  theorem  2.2. 

Assume  there  exists  an  infinite  directed  path  from  the 
root  of  T(7)  with  node  sequence  P, »P**P*» • • • *P„» • • • 
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Then  by 


lemma  2.2.1,  tnere  exists  a  subsequence 


p, »P4*pt*  •••  p*—  Pt^-  •  •  •  p^  •  •  *  •  ®y 

definition,  if  p«  *  pt  taen  pb  is  a  leaf  node  and 
therefore  the  inequality  is  strict  and 
P*  <P*  <pc...<ps  <•••  «  Again  by  definition,  since 

P*  <P*»  Pk  must  have  one  more  entry  equal  to  GJ  than  p*. 
Since  toe  number  of  entries  is  finite,  this  is 
impossible  and  tnerefore  no  such  infinite  directed  patn 
exists.  By  lemma  2.2.2,  T(V)  is  finite. 

Using  these  theorems,  it  is  possible  to  prove  tne  following 
decidability  theorems  about  the  reachability  set  R ( V ) : 

Theorem  2.3  Given  some  finite  n , 

Vt  i  €  R(7 )  A  (x(i)^  n)  is  decidable. 

Proof.  Construct  T(V).  By  tneorem  2.2  T(V)  is  finite. 
Therefore  Vy  y  €T(7)  A(y(i)^n)  is  decidable.  By  theorem 
2.1  then,  the  question  is  decidable  for  R(V). 

Theorem  2.4  Given  some  subset  of  the  entries  for  tne 
r-  dimensional  vector  addition  system  ©Sil,2,...r>, 

Vx  I6N**  3y  y  €  R(7)  A  (Vi  i  €  ©)  . 

y ( 1 )  j2x(l)  is  decidable. 

Proof.  By  tae  definition  of  T(7),  tnis  property  noids  iff 
there  exists  a  leaf  node  z  such  that  Vi  i£@  * ( i )  SCJ  . 
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Theorem  2.5  Given  a  vector  addition  system  R(7),  it  is 
decidable  whether  R(V)  is  finite. 

This  result  follows  directly  from  theorem  2.4. 

Theorem  2.6  Given  two  vector  addition  systems  V  and  7', 
R(V)Js3.  R(F')  is  undeclda ble. 

Rabin's  proof  for  this  result  appears  in  Balter  [34j . 

It  should  be  noted  that  tne  general  reachability  problem 
i.e.,  given  i^]v|ris  x€R(7),  is  not  determined  by  the 
reachability  tree.  However,  an  algorithm  for  solving  tne 


reachability 

problem  has 

been 

found  [35] . 

Therefore , 

the 

reachability 

problem 

is 

decidable 

(although 

the 

computational 

complexity 

is  not 

known) . 

This  completes  our  study  of 

vector  addition  systems. 

tfe 

next  demonstrate  the  correspondence  between  vector  addition 
systems  and  marked  petri  nets.  Let  M  «  <P,T,I,OtjJ>  be  an 
arbitrary  marked  petri  net.  The  corresponding  vector 
addition  system  F(d,W)  may  then  be  constructed  in  the 
following  manner: 

let  the  dimension  r  =  Jp{ 

let  d  *|LL,  wnerejLL,  is  an  Initial  marking  for  M 
let  W  *  {wKi  ti  €  T,pj  €  P  wR ( J)  ■  0(pj  ,tt- )  -  I(p;  ,  tt- )  > 
Note  that  jvj  *  J t|  and  that  elements  of  V  reflect  tne  net 
change  in  marking  resulting  from  the  firing  of  a  transition 
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in  M.  This  leads  to  tne  following  tneorem  relating  tne 
reachability  sets  of  M  and  7: 

Theorem  2.7  Q(M)  *  R(7) 

Proof.  1).  Q(M).=?R(7).  Let  x€R(M).  Then 

,*>x  .  By  definition  of  *  k* 

F(  JJL  *  tt* )  =  fJL+  wfc  and  substituting  for  t,  ,  ta,  t3 »  .... 
t*  in  the  firing  sequence  /J.+  w,  *■  w*  +  . . .  w„  *  x 
Since  JjL**  d  by  definition.  x£R(7)  . 

ii).  Q(M)£=R(7).  Let  x  6H(7).  Then 

x  *  d  ♦  w,  +  ♦  ...  w*  .By  the  same  reasoning  as  case 

1 «  ...  x  . 

Using  theorem  2.7  and  the  results  for  vector  addition 
systems  we  state  the  following: 

Tneorem  2.8  Slven  a  marxed  petri  net  M  with  initial 
marXingjUL,,  ,  it  is  decidable  if  the  reachability  set  Q(M) 
is  finite. 

Theorem  2.9  3iven  a  marXed  petri  net  M  with  initial 
marXing  JJL*  ,  it  is  decidable  if  there  exists  x^H*  such 
that  for  all  elements  of  the  reachability  set  Q(M) » 
each  entry  fj,(  i  )$  X. 

Definition  2.9  A  marXed  petri  net  M  is  x-bounded  iff 

3*  iV/X  /Jl€Q(M)  3“>fJ.(l)~*  . 
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Flrure  2.5.  Reachability  tree  for  Example  1 
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Definition  2.10  A  marked  petrl  net  M  Is  safe  Iff  It  Is 
k-bounded  with  k  *  1  . 

We  complete  tnis  section  by  once  again  considering  Example 
1.  Define  tne  corresponding  vector  addition  system: 

7  «=  (dfW)  with  d  »  [2,1,1,0,0,0,0J  as  indicated  by 
Fieure  2.2. 

W  *  {  [-1,0, 0,1, 0,0,0]  ,  [-1,-1, 0,1, 1,0,0]  , 

[0,1, -1,0, -1,1,0]  ,  [0,0, -1,0, 0,0,1]  , 

[0,0, 1,0,0, 0,-1]  } 

Next,  construct  the  corresponding  reachability  tree  T(7). 
The  tree  is  snown  in  Figure  2.5.  By  inspection,  tne 
reachability  set  R(V)  is  determined  to  be: 

{  [2, 1,1, 0,0, 0,0]  ,  [1,1, 1,1, 0,0,0]  ,  [1,0, 1,1, 1,0,0]  , 

[2, 1,0, 0,0, 0,1]  ,  [0,1, 1,2, 0,0,0]  ,  [0,0, 1,2, 1,0,0]  , 

[1,1, 0,1, 0,0,1]  ,  [1,1, 0,1, 0,1,0]  ,  [1,0, 0,1, 1,0,1]  , 

[0,1, 0,2, 0,0,1]  ,  [0,0,e,2,l,0,l]  ,  [0,1, 0,2, 0,1,0]  , 

[0,0, 0,2, 1,1,0]  > 

This  (finite)  set  is  also  0(M)  and  therefore  M  is  k-bounded 
with  k  *  2. 

B.  SUBCLASSES  OF  MARKED  PETRI  NETS 

The  nets  investigated  in  tne  preceding  parts  of  this 
section  are  more  properly  referred  to  as  generalized  petri 
nets.  Analysis  of  generalized  nets  has  proved  to  be  somewhat 
Intractable.  As  a  result,  several  properties  of  petri  nets 
have  been  studied  which  define  subclasses  of  the  generalized 
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nets.  These  restrictions  appear  to  be  justified  in  that  many 
(if  not  most)  actual  systems  may  be  modeled  by  the 
restricted  nets. 

Definition  2.11  A  transition  t  T  is  live  for  markingjj^ 
iff 

ll  — >3o-\  At4-€SK 

where  Sk  is  the  enabling  set  forjLl*. 

If  a  transition  is  live,  a  firing  sequence  may  always  be 
found  which  will  allow  it  to  be  fired  indefinitely  often. 

Definition  2.12  A  marked  petri  net  ti  Is  live  iff 
Vt  t€T  ~>  t  is  live  for  marking  jli* 

In  systems,  liveness  is  often  associated  with  the  problem  of 
deadlock.  Hack  [36]  has  shown  that  liveness  is  equivalent  to 
the  reachability  problem}  therefore,  it  is  decidable. 

Definition  2.13  A  place  pt- €  P  is  conflict  free  iff 
V/Xfc  t,  ,  tt,  •  •  * ,  £  p,'*  A  ==> 

3/ 

for  any  marking,  a  conflict  free  place  may  not  enable  more 
than  one  transition.  In  Figure  2.6,  place  p,  is  not  conflict 
free  since  both  t,  and  t2  are  enabled. 

Definition  2.14  A  petri  net  M  is  conflict  free  iff 
Vp  p  €P  **>  p  is  conflict  free. 


46 


A  stronger  statement  concerning  places  is  the  following: 
Definition  2.15  A  place  p  is  decision  free,  iff 

K(  -  |*-|  =  1  • 

Definition  2.15  A  marked  petri  net  M  is  a  marked  graph  iff 
Vp  P  *=>  P  is  decision  free. 

A  final  property  of  petri  nets  may  be  defined: 

Definition  2.17  A  marking  is  persistent  iff 

VfXt€S  A  *=>  t  €  V  1 6(T* 

A  persistent  marking  is  one  in  which  an  enabled  transition 
remains  enabled  until  it  is  fired. 

Definition  2.18  A  petri  net  M  is  persistent  iff 
Vt  t  €T  **>  t  is  persistent  forjui*. 

The  question  of  persistence  is  important  in  the  analysis  of 
petri  nets  and  therefore  we  present  a  decidability  theorem 
for  these  nets: 

Theorem  2.10  Given  a  k-bounded,  marked  petri  net  M,  it  is 
decidable  whetner  M  is  persistent. 

Proof.  Since  M  is  k-bounded,  its  reachability  set  Q(M)  is 
finite.  For  each  jjLk  €  0  construct  the  enabling  set  S*. 
For  each  t£  €  SH  determine  Sh„  where .  If  Sh„ 
2sk  -  {tt->  ,  M  is  persistent. 


47 


Note  mat  all  conflict  free  nets  (and  taerefore  all  marted 
graphs)  are  persistent.  We  next  consider  some  aspects  of  the 
petrl  net  classes  having  taese  properties. 

1.  Marted  Graphs 

Marted  grapns  nave  been  extensively  studied  by 
Commoner  and  Holt,  among  others  [11,12].  Here  we  present 
some  pertinent  results  of  tnelr  wort. 

Recall  from  graph  theory  the  following  three 
definitions: 

Definition  2.19  Let  D  *  <A,R>  be  a  digraph  with  nodes  a 
and  b.  A  .directed  patn  from  a  to  b  is  a  finite  sequence 

of  nodes  P  *  (c„ , c  , , . . . »c„)  such  that  ce  *  a,  c^  =  b, 
and  for  all  c,-  with  flJfa.i'SsLn  ctRct<>l  .  If  a  =  b,  P  is  a 
directed  circuit. 

Definition  2.20  A  digraph  D  =  <A,R>  is  strongly  connected 
If  for  every  two  nodes  a,b$A,  tnere  Is  a  directed  patn 
from  a  to  b  and  b  to  a.  If  tnere  is  an  undirected  path 
from  a  to  b,  D  is  connected. 

Definition  2.21  A  component  of  a  digraph  D  is  a  connected 
subdigraph  of  D  which  is  not  a  proper  subdigraph  of  any 
connected  subdigraph  of  D. 

The  constraint  on  the  input  and  output  transitions  to  a 
place  mates  it  possible  to  replace  every  place  with  a  single 
directed  arc  between  its  input  and  output  transitions.  In 


this  way  the  petrl  net  reduces  to  a  digraph  simplifying 
analysis.  The  marked  graph  may  then  be  more  simply  defined 
as: 


Definition  2.22  A  marked  graph  M'  *  <T '  ,S'  ,jjf>  is  a 
three-tuple  where 


T'  »  T 

E'  :  TXT  — >  {0,1} 
wnere  E(tiftj)  * 
jlxT  :  E'  — >>J wnere 


if  3?  o(p,t *) 
A  Kp.t;)  =  1 

otherwise 


*  1 


»nere  etj€*  A  .p„  31  it;)  A  P„*  *  Uj) 

(Here  we  have  synonymously  defined  the  edge  set 
E'  »  {e<-j}  wnere  tne  edge  directed  from  node  i  to 


node  J  ety€E'  iff  E'(t;,tj)  *  1 


Additionally  define  tne  token  count  N  as: 


Definition  2.23  The  token  count  of  a  eraph  is  a  function 
N  :  P  — where 

if  p£-E  then  N(P)  *2u(e,-)  for  e«-€P 

CM  * 

Figure  2.7  shows  the  graphical  representation  of  a  marked 
graph  where  the  number  of  tokens  on  an  edge  e*j  corresponds 
to  fl'(eij)-  The  following  theorems  and  proofs  appeared  in 
[11J  : 
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Theorem  2.11  4  meriting  jji  is  live  iff  the  token  count 

N  >  0  for  every  directed  circuit  in  M. 

Proof,  i).  Assume  fJ *'  is  live  and  N ( B)  *  0  for  some 

directed  circuit  B  and  e;j  is  an  edge  m  tnat  circuit. 

By  definition,  a  sequence  CT  exists  which  enables  tj  . 
After  firing  )  *  1  and  therefore  N  (B )  =  l  in 

contradiction  with  the  assumption. 

ii).  Assume  N(B)  >  0  and  ty  is  a  node  in  directed 

circuit  B.  If  t y  is  enabled,  tj  is  live.  Otherwise  let 

tt'  be  a  node  in  B  such  that  e^j  is  in  B.  If  tj  is 

enabled,  fire  it  resulting  in  tj  being  enabled.  If  not, 

continue  to  backtrack.  Since  the  path  length  of  B  must 
be  finite  in  the  directed  circuit  beginning  and  ending 
with  ty,  this  procedure  must  halt  and  therefore  tj  is 
live. 

This  leads  immediately  to  a  corollary: 

Corollary  2.11.1  A  marking  which  is  live  remains  live 
after  firing. 

Theorem  2.12  A  live  marking  is  safe  iff  every  edge  in  the 

graph  is  in  a  directed  circuit  with  token  count 

N(P)  »  l. 

Proof.  Clearly,  the  token  count  of  any  directed  circuit  is 
constant.  If  N(P)  *  1  then,  the  edges  of  the  directed 


by  tne  same 


circuit  must  be  safe.  If  N(P)  £  >  i  , 
process  as  in  tneorem  2.11  transitions  in  the  circuit 
may  be  fired  until  it  tokens  appear  on  tne  same  edge. 

Theorem  2.13  For  every  finite,  strongly  connected  grapn  G 
there  exists  a  live  and  safe  marking  for  the 
corresponding  marked  grapn  M ' . 

Proof.  By  definition,  each  edee  in  6  must  lie  in  a 
directed  circuit.  Since  G  is  finite,  a  finite  number  of 
directed  circuits  exist.  Therefore  construct  fA'  by 
placing  one  token  arbitrarily  on  each  directed  circuit. 
The  conditions  of  theorems  2.11  and  2.12  are  met  and  m' 
is  live  and  safe. 

2.  State  machine  Decomposable  Nets. 

i 

This  class  of  petri  nets  has  been  studied  by 
Ramcnandani  [9].  A  state  machine  is  defined  as: 

Definition  2.24  A  marked  petri  net  M  is  a  state  machine 
iff 

Vt  t€T  AtKpj.t)  >  0]  A  [I(Pj.t)  >  0j  ==>  p  <•  =  p j 
Vt  t^T  A  [o(pt-,t)  >  0]  A  [o(pj,t)  >  0J  =*>  pf-  =  p j 
That  is,  Vt  |  vtj  *  jt»|  *  1. 

This  restriction  results  in  nets  which  are  functional 
equivalents  of  finite  state  machines,  hence  the  name  state 
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machine.  Note  that  state  macnines  allow  conflict  i.e., 
nondetermini sm . 

Definition  2.25  A  subnet  is  a  strongly  connected 

component  of  M. 

Definition  2.25  A  petri  net  M  is  state  macnine 
decomposable  iff 

}  !  L/p<;  *P  A  =T  A  M  is  a  state  macnine. 
Several  properties  of  state  macnines  may  easily  be  snown. 

Theorem  2.14  The  token  count  N(M)  is  constant  for  a  marked 
state  macnine. 


Proof. 

Assume 

N(m)  *  C  and  t<€T. 

By 

definition 

• 

r* 

e. 

u 

l*H*  1 

.  Let  {p,  }  **tj  and 

{p,> 

=  t£*  with 

N(pf  ) 

*  c,  and 

Nfp^)  «  ca  ,  If  tt-  does 

not 

fire,  tne 

token 

count 

of  p,  and  are  unaffected 

by  t4-.  If  t^ 

does 

f i  re ,  by 

definition  N(p()  c,-  1  and 

N(p 

• 

v-< 

4 

O 

II 

Of 

Summing  we  nave: 

^N(p)  =  c,  -l+c4  +  l  =  c,+c2 
and  the  token  count  does  not  chanee . 

Corrolary  2.14.1  Every  marked  state  macnine  is  bounded. 

Proof.  Since  the  token  count  N(M)  is  constant,  the  maximum 
number  of  tokens  at  any  place  is  N(M);  therefore  M  is 
bounded. 
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3.  Consistent  Petri  Nets. 

As  additional  class  of  petrl  nets  are  tnose  for 
which  there  exist  consistent  current  assignments. 

Definition  2.2?  A  petri  net  M  is  consistent  iff  tnere 
exists  a  function  cjb :  T  — >  I  such  that 

1.  Vti^T  ($(tt')  *C pt- 

2.  VpgP  %  (£x  I(p,t)  *  £cj>x  0  (  p  *  t :  ) 

j*i 

where  in  the  summation  n  =  fl|  . 

The  function  c£  is  analogous  to  an  electromagnetic  flux  and 
the  Cj>/s  are  referred  to  as  the  currents  associated  with 
transitions  tt-.  Note  that  part  2  of  tne  definition  is  an 
expression  of  Kirxhoff's  Law.  Part  2  requires  solving  tne 
following  set  of  linear  equations: 


cr . . . 

• 

• 

• 

• 

• 

• 

• 

<Pi 

Co  *,i . 

• 

• 

• 

• 

<P, 

• 

. 

• 

<k 

• 

• 

Cq  »,  * . 

<Pn 

where  Cc  and  C0  are  the  Incidence  matrices  for  li. 
If  a  non-tero  solution  exists,  M  is  consistent. 

Example  3.  Consider  the  net  in  Figure  2.9. 


0  110  0 

1  0  0  0  0 

Construct  CE  * 

0  0  0  1  0 
0  0  0  0  1 
1  0  0  0  0 

co  3 

0  10  0  0 
0  0  10  0 
0  0  0  1  1 
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C  j  x  <$  = 


0  110 
0  0  0  1 
0  0  0  0 
10  0  0 


CQ  xc$= 


10  0 
0  10 
0  0  1 
0  0  0 


m<P, 


C &♦<£.. -<p, 

3>,*  2  <V  <P9s<P*a  <Ps^  1 


Therefore  M  Is  consistent. 


The  significance  of  consistency  is  that  a  consistent  system 
will  cycle  —  glren  an  Initial  marking  fJL0,  there  exists  a 
firing  sequence  such  tnat/LL.  V.  L  Inconsistent  system 
will  either  consume  tokens  and  halt  or  produce  tokens  and 
become  unbounded.  These  results  are  summarized  In  two 
theorems  by  Ramchandani  [8] . 


Theorem  2.15  A.  petrl  net  M  Is  consistent  Iff 

-i  C 7 

dfj^cr5uch  that  is  a  cycle. 

Proof.  1).  let  <Ptt  <pj .  • .  cp^  be  the  consistent  currents  of 
the  transitions  of  M.  Let  /Jijp,)  =  <p  *  Cp  +  <p  *C  wnere 
correspond  to  t4-. .  .t„€pt-« 


Then  let 


CT*  {t,,ta...}  wnere  the  multiplicity  of  in  (Jis 
equal  to  Its  current  giving  j  .  Since  the  sum  of 

tae  currents  Into  and  out  of  a  place  Is  0, 
jj.#( pt- )  *  jU. j ( p ; )  and  pu.* fJLj  .  Therefore  CTis  a  cycle. 
11).  Let  |UL^>fJL.  be  a  cycle.  Then  fJlJp<)  =>JU..  (p,  )  .  Let 
k(  ,ka, . . .  ,ic„  be  the  multiplicity  of  transitions 
t(  ,t2,..  .,t,  g»p4  and  1(  »1^»...»1JI  be  the  multiplicity  of 

A  * 

transitions  1 1  , ta, . •  • , t„(:pc«  .  2*j  =  •  Then  let 

cfXtj  )  *  *;  if  tj^*pt-  andCj5(tj)  =1;  If  t;gpt.  •  .  This  is 
a  consistent  current  assignment  and  therefore  M  Is 
consistent . 

Theorem  2.16  A  petrl  net  H  with  a  live,  bounded  martin* 
is  consistent. 

Proof.  Since  M  is  bounded,  its  reachability  *raph  Q(M)  is 
finite.  Since  M  is  live,  there  exists  a  strongly 
connected  subgraph  which  contains  fj.  .  Tnerefore,  tnere 
exists  a  directed  circuit  in  the  subgraph  flrln*  all 
transitions.  Tnis  Is  a  cycle  and  therefore  M  is 
consistent. 

We  conclude  our  description  of  petrl  net  subclasses  by 
conslderln*  the  hierarchical  relatlonsnips  between  classes. 
In  the  sections  on  marked  graphs  and  state  macnines,  it  has 
been  shown  tnat  botn  are  contained  within  tne  class  of 
bounded  petrl  nets.  It  Is  easy  to  show  that  the  containment 


is  proper.  Figure  2.9  snows  a  net  wnicn  Is  bounded  but 
neltner  a  marked  graph  nor  a  state  machine.  The  Intersection 
of  the  class  of  marked  grapes  and  state  machines  are  a 
degenerate  class  we  call  sequential  processes.  Theorem  2.16 
showed  that  all  live,  bounded  marked  nets  are  consistent. 
Once  again,  tne  containment  is  proper  —  Figure  2.10  is  an 
example  of  an  unbounded  non-live  net  which  is  consistent. 
Finally  note  tnat  all  persistent  or  conflict  free  nets  are 
deterministic  and  therefore  may  be  reduced  to  decision  free 
nets  l.e.,  marked  graphs.  Tnese  relationships  are  summarized 


in  Figure  2.11 


III.  STOCHASTIC  PETRI  NETS 


To  this  point  we  have  analyzed  petri  nets  on  tne  basis 
of  taelp  structural  cnaracterl sties .  To  utilize  petri  nets 
for  computing  performance  measures,  it  is  necessary  to 
Introduce  tne  concepts  of  time  and  nondeterminism  to  tne 
basic  model.  Ve  turn  first  to  tne  question  of  modeling  time 
in  petri  nets. 

A.  TIMED  EVENTS  IN  PETRI  NETS 

An  important  concept  in  Section  II  was  tne  martring,  or 
system  state,  of  tne  net.  Tne  martring  gives  an  instantaneous 
description  of  tne  token  content  of  eacn  place  in  tne  net. 
Tne  marking  was  cnanged  as  a  result  of  tne  firing  of  a 
transition,  Be  defined  a  firing  sequence  as  an  allowable 
ordering  of  transition  firings  in  accordance  witn  the  rules 
for  enabling  transitions.  By  controlling  tne  dynamics  of  tne 
transition  firing  process,  it  is  possible  to  analyze  tne 
cnanges  in  system  state  as  a  function  of  time. 

Several  autnors  nave  addressed  tne  question  of  adding 
timing  considerations  to  petri  nets.  Two  different 
interpretations  have  resulted  from  tnis  work.  Sifakis  [37J 
has  proposed  that  once  enabled,  transitions  fire 
instantaneously.  A  delay  is  then  Introduced  before  tokens 
are  available  at  the  output  places  for  possible  enablings  cf 
other  transitions.  An  alternative  view  is  that  taken  by 
Ramchandanl  [9}  and  Zuberek  [38].  In  their  models,  once 
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enabled,  transitions  fire  after  a  delay  called  the  firing 
tine.  After  the  firing  time  Is  completed,  the  net  changes 
state  by  moving  the  appropriate  toJcens.  These  two 
)  Interpretations  appear  to  be  equivalent.  We  cnoose  to  use 
the  latter  interpretation  to  conform  to  the  usual  notion  of 
a  queueing  service  center. 

We  first  consider  the  case  where  transition  flrlnrs 
occur  at  discrete  time  epocns  *Tj,Ta,  ••*,%,••  •  where  T0  Is 
the  instant  of  the  nth  firing. 

Definition  3.1  The  system  state  of  a  marJced  petrl  net  M  Is 
a  function: 

U:T  —  >|X 

where  ^  *  {  T| iTj*  •  •  •  .  *  •)  » 

n(-T.)  =ju.o  , 

and  0(T„)  =«>  3  )  -|ULj  A  JLL;  2>fJLfc 

U  Is  a  step  function  wltfl  discontinuities  at  tnose  Instants 
of  time  In  which  the  system  changes  state. 

Definition  3.2  The  firing  time  X  of  a  petrl  net  is  a 
function: 

X:T-->R* 

where  Vt(  €  T  X(t^  )  «fj  *  x 

By  this  definition,  Xj  is  the  time  required  for  a  firing  of 
the  transition  t£. 
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By  specifying  the  firing  tine  function  X,  It  Is  possible 
to  describe  O^).  In  this  section  we  consider  the  case  wflere 
tne  transition  firing  times  X£  are  constant  for  all 
transitions.  This  restriction  manes  It  possible  to  describe 
a  total  ordering  of  transition  firings  for  persistent  nets. 
In  tne  case  of  allowed  conflict  between  transitions*  it  is 
necessary  to  impose  a  priority  scneme  on  transition  firings 
to  resolve  tne  conflict  (tnat  is,  to  mane  tne  firing 
deterministic).  Tnis  ordering  amounts  to  a  restriction  on 
tne  firing  sequences  wnica  are  allowed.  Tnose  sequences  (J 
for  whicn  tne  ordering  bolds  are  termined  feasible  firing 
schedules.  Ramchandani  has  shown  that  for  timed  marked 


grapns  and  live,  safe,  and  persistent  petri  nets  a  periodic 
feasible  firing  schedule  exists.  He  additionally  derived  an 
upper  bound  on  tne  computation  rate  (cycle  period)  for  state 
machine  decomposable  nets.  The  bound  is  given  by: 
pmax  =  mln[p,pa,pnJ 

where  pn  is  the  cycle  time  for  eacn  circuit  in  tne 
corresponding  net  and  is  given  by: 

N(C£) 


2*i 


<J K 


where  N(C^)  is  tne  token  count  for  circuit  * 


x ;  is  tne 


sum  of  the  firing  times  for  the  transitions  in  Cc* ,  and  c^ls 
tne  current  associated  with  that  circuit  in  a  minimal 
current  assignment.  Ramchandani  also  argues  that  this 
formula  can  serve  as  a  first  order  approximation  where  tne 


mem  firing  times  TQ  are  substituted  for  the  deterministic 
firing  time  in  tne  formula.  A  slightly  different 
derivation  of  the  same  result  was  made  by  Ramamoorthy  and  Ho 
[39  J . 

B.  MARAO?  ANALYSIS  OF  PETRI  NETS 

Research  Into  the  behavior  of  timed  petri  nets  to  date 
has  concentrated  on  deterministic  nets  with  constant  firing 
times.  As  noted  in  Section  I,  this  approach  fails  to  account 
for  the  randomness  and  uncertainty  wnicn  characterize  actual 
systems.  We  propose  that  nondeterminism  be  modeled 
probabilistically  in  tne  net.  Our  metnod  differs  from 
previous  wort  by  emphasizing  the  stochastic  nature  of  the 
system  state  (marking).  In  this  way,  it  is  possible  to  apply 
the  fcnown  methods  of  queueing  theory  to  analyze  tne 
probabilistic  properties  of  these  nets  which  we  call 
stochastic  petri  nets.  We  introduce  in  tnis  section  two 
sources  of  nondetermlnism  which  will  be  modeled  by  the 
stochastic  petri  nets  —  random  transition  firing  times  and 
the  probabilistic  firing  of  simultaneously  enabled 
transitions. 

We  first  snow  that  if  the  firing  time  i  for  each 
transition  is  considered  to  be  a  random  variable  rather  than 
a  deterministic  one,  it  Is  possible  to  analyze  the  tohen 
content  of  the  net  as  a  stochastic  process. 
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Definition  3.3  Tfie  firing  time  is  an  independent, 

identicaliT  distributed,  random  variable  sucn  tnat 
Vti  €  T  is  the  firing  time  for  tne  ntn  firing  of 
transi  tl  on  t£  . 

The  requirement  tnat  X[  is  independent  and  identically 
distributed  is  necessary  for  our  derivation  of  a  Martov 
cnain  representation  for  tne  net  state  space.  In  tne  case  of 
computer  networks,  Ileinroet  [40]  has  investigated  this 
requirement  which  he  has  named  the  message  independence 
condition.  Tnls  assumption  is  somewnat  artificial  m  that  it 
implies,  for  example,  that  the  time  required  to  process  the 
sane  message  at  two  nodes  is  independent.  This  difficulty 
notwithstanding,  results  for  an  analysis  of  the  ARPA  net 
show  some  evidence  for  the  validity  of  this  assumption  [41] . 
Applying  the  metnods  of  probability  theory,  tne  firing  time 
distribution  may  be  defined  as: 

Definition  3.4  Tor  ail  tt'€T,  if  is  tne  firing  time  for 
tt  * 

Sj  (x)  *  P[X,r£  xj 

In  the  usual  way  we  define  the  density  function: 

Definition  3.5  For  all  transitions  t£  <=  T,  tne  firing  time 
density  function  is  given  by 

st(x)  *  d/ix  [St-(x)3  *  plXt'  *  x] 
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Likewise  define  tne  moments: 


Definition  3.6  The  ntn  moment  of  tne  firm*  time  density 
function  is  given  by: 

BIX{  P  =  j  xns^ (x)dx 

and  in  particular  B[X^J  **T^‘  *  1/)U^  ls  the  mean  firing 
(service)  time*. 

Tnese  definitions  make  it  possible  to  model  systems  by 

applying  the  appropriate  distributions  to  the  firing  time 

function.  It  ls  clear  tnat  tne  feasible  firing  sequences  C T 

for  a  petri  net  are  no  longer  deterministic.  It  is  necessary 

to  consider  now  this  nondeterminism  can  occur  in  the  net. 

Referring  to  Figure  3.1(a),  it  can  be  seen  tnat  transitions 

ta  and  *4  are  both  enabled,  rfith  random  firing  times,  the 

sequences  t2,t^  and  t^.t^  are  both  possible.  In  tnis 

instance  the  effect  of  the  nondeterminism  is  unimportant  to 

overall  system  operation  since  the  two  processes  are 

Independent  at  this  point.  A  more  interesting  situation  ls 

depicted  in  Figure  3.1(b).  The  transitions  ,  tg,  and  t+ 

are  in  conflict.  To  analyze  tnis  type  of  nondeterminism  it 

ls  necessary  to  specify  the  branching  probabilities  for  each 

of  the  possible  paths.  Tnere  are  several  possible  ways  this 

may  be  accomplished.  For  example,  each  simultaneously 

*  The  mean  service  rate  )JL  ls  an  unfortunate  conflict  in 
notation.  Due  to  its  long  standing  use  in  the  literature,  we 
will  use  this  notation  pointing  out  its  meaning  wnere 
confusion  might  exist  with  the  earlier  definition  of 
marking. 
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enabled  transition  may  begin  firing  at  once  witn  tne 
transition  which  completes  firing  first  causing  tne  marking 
to  change.  Tne  problem  of  determining  wnicn  transitions  are 
simultaneously  enabled  is  a  significant  one.  Ve  can  simplify 
the  problem  by  restricting  our  analysis  to  free  choice 
places. 

Definition  3.7  A  place  p  is  free  cnolce  iff 
|p-.|  *  1  vVtjtf  tj€p<*  =*>  -V  *  ^pL> 

A  free  choice  place  is  one  which  either  has  a  unique  output 
transition  or  is  the  only  input  place  to  eacn  of  its  output 
transitions.  This  restriction  ensures  that  a  marking  for  p 
will  either  enable  all  of  its  output  transitions 
simultaneously,  or  will  enable  none  of  them.  With  this 
restriction,  it  is  now  possible  to  define  tne  branching 
probabilities  for  the  output  transitions  of  a  free  choice 
place. 

Definition  3.8  The  branching  probability  for  a  free  choice 
place  p^  with  p^#  «  {t ,  ,t2, . . .  ,t„>  Is 
b  cj  «  PC  will  fire  !  t,,t2,  ...,t  •  are  enabled] 
such  that: 

9  <b 1 
and 

«  1  wnere  n  -  |p£»| 
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We  make  the  assumption  that  these  prohabiii ties  are 
functions  of  the  firing  distributions  for  the  output 
transitions  only  and  in  particular,  that  they  are  constant 
and  Independent  of  the  marking. 

By  allowing  these  sources  of  nondeterminism,  the  system 
state  0  may  be  expressed  as  a  stochastic  process. 

Definition  3.9  Let  U('f),  the  system  state  of  a  petri  net 
M,  be  a  random  variable  and  a  function  of  time  where 
U  (T)  *  [u,  (T)  .Ujjtf) , . . .  ,u„  (f)]  such  that  ui  (*T)  =/Jv(p  [)  • 
U(  )  is  a  discrete  state,  continuous  time  stochastic 
process  described  by  the  probability  distribution: 

tfL  (jjtf'f*)  a  p[D(r,  )  ■  fJ,  t  •  U (“T g  )  •  *U('f^  )  =/^'n  ^ 

fJLt»  fj.  2 1  *  •  •  t  (JiffzQiM)  « 

U(T)  describes  the  manner  in  which  the  system  moves 
between  states  in  the  reachability  set.  It  should  be  noted 
that  the  distribution  (]U.:T)  is  equivalent  to  expressing 
the  probability  that  some  feasible  firing  sequence  (j  exists 
such  that  fJL,a>jJL.  .  Therefore,  it  is  possible  to  extend  tne 
definition  of  liveness. 

Definition  3.10  A  transition  t  €T  is  live  for  state  D 
iff 

Vo  3o;  °j  a  p  c<x#3  >0  «*> 

3o^  0  ^°«A  p[<7*J  >0  A  t;  €  S* 
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Theorem  3.1  For  a  live  stochastic  petrl  net  M  with  marking 
and  Initial  marking  JjLo€0(M), 
p[H<T)  =M-i3  >0 

Proof.  Assume  p[B(-T)  “M-J  =  0-  Then  tne  probability  tnat 
a  firing  sequence  (J  exists  such  that  fXa^>^£  is  zero  in 
contradiction  with  the  assumptions  of  Definition  3.10 
and  therefore  M  cannot  be  live. 

We  are  interested  in  determining  the  conditions  for  wnicn  U 
is  a  Markov  chain,  that  is,  when 

PW'Cui  3  I  Qtf'n)  “M-n*  •••* 

.ff('C)  -ju..]  =  p[a (r^  )  * i  &<tb)  =/xj. 

In  addition,  we  are  interested  in  determining  the 
stationary  (time  independent)  state  probabilities  if  tney 
exist.  We  first  consider  tne  case  of  state  machine 
decomposable  petri  nets. 

C.  CLOSED  PETRI  NET  STSTEMS 

To  express  tne  system  state  transitions  as  a  Markov 
process  it  is  first  necessary  to  derive  expressions  for  the 
arrival  and  departure  processes  for  tne  places  in  the  net. 
This  may  be  accomplished  by  considering  the  net  as  a 

collection  of  nodes,  each  of  which  has  a  well-defined 

benavior,  and  in  particular,  for  wnicn  tne  arrival  and 

departure  processes  may  be  expressed  analytically. 
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A  node  la  a  petri  net  is  defined  as: 

Definition  3.11  A  node  n  in  a  petri  net  is  a  subset  of  the 
set  {P|JT>  sucn  tnat 

Vt£  €  T  €  n  <=*> 

Vp j  P;€  *tt*  <=*>  Pj  €n 

AVtK  <”>  tK€n 

Theorem  3.2  Tne  node  set  [nj  =  n,  ,  n2,...,n„  is  a 
partitioning  of  a  petri  net  M. 

* 

Proof,  i.)  yn^  «{P(JT>.  By  definition,  every  transition  t 
is  trivially  an  element  of  some  node  n*.  Assume  there 
exists  a  place  pj  such  that  pj^(n/#  n2,...,nft).  By  the 
definition  of  a  petri  net,  p j  has  (at  least)  one  input 

transition  tj  .  Since  t£  is  an  element  of  some  node,  by 

Definition  3.11  p j  is  an  element  of  that  node, 
ii.)  Vna  ,nfc  <:  [nj  n*  «  y  nk  f)  =0.  Assume  there 

exists  some  transition  t£€tn*nnb).  Let  pj  be  an  input 
place  to  tt‘  and  an  element  of  n*.  Tnen  by  Definition 
3.11  p j  is  also  an  element  of  nb.  Now  let  t^  be  an 
output  transition  to  pj  and  an  element  of  na.  Again  by 
definition  tK  is  also  an  element  of  n^  and  therefore 
na  *  0^. 

Likewise,  assume  there  exists  some  place 

p j  *7  the  same  reasoning  nfc  *  n^.  Therefore, 

the  set  of  nodes  defines  a  partitioning  of  M.  QED. 
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Figure  3.2(a)  snows  tne  node  partitioning  of  an 
arbitrary  petri  net.  Now  consller  tne  single 
place/transition  node  n(.  Figure  3.2(b)  is  tnis  node  witn  an 
arbitrary  marking.  Since  we  nave  assumed  tnat  tne  transition 
in  tnis  node  is  firing  wnenever  enabled,  we  nave  tne 
important  result  that  this  node  is  equivalent  to  a  single 
server  queueing  system. 

The  marking  for  p,  which  we  have  defined  as  tne  state 
element  u.  Includes  the  tokens  being  fired  or  waiting  to 
fire.  Two  features  of  tnis  representation  snould  be  noted. 
First,  all  tokens  are  identical;  no  token  classes  exist. 
Second,  no  queueing  discipline  is  modeled  in  the  system. 
This  places  a  restriction  on  the  ability  to  derive  analytic 
solutions  for  the  system. 

To  describe  the  operation  of  tne  node,  tnat  is, 
determine  the  local  state  probabilities  PIU(T)  »  u] ,  it  is 
necessary  to  cnaracterlze  tne  arrival  and  departure 
processes.  It  is  well  known  that  the  exponential 
distribution  is  tne  only  continuous  distribution  for  wnlch 
the  Markov  property  holds.  In  addition,  it  has  been  shown 
[33]  that  arbitrary  work  conserving  queueing  disciplines 
result  in  equilibrium  product  form  state  probability 
solutions  for  exponential  firings.  Therefore  we  assume  the 
firing  time  distribution  S(x)  to  be: 
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Definition  3.12  The  firing  time  distribution  for 


transition  t£  is  given  by 
S<  (x)  *  1  “  exp(-|jLjX ) 
vnere  tne  mean  firing  rate  is  jJLj;. 

The  requirement  that  tne  queueing  discipline  be  work 
conserving  means  tnat  no  knowledge  of  tne  firing  time 
requirements  is  used  in  selecting  tokens  for  firing.  It  is 
clear  from  tne  indeterminate  nature  of  tne  toitens  in  petrl 
nets  that  this  is  Indeed  the  case  and  therefore  ve  are 
Justified  in  asserting  that  the  Martov  property  holds. 

Finally,  it  is  necessary  to  determine  the  arrival 
process  for  the  node.  In  the  case  of  closed  networks  (and 
the  petri  nets  we  have  considered  thus  far),  the  arrivals 
are  made  up  of  departures  from  other  nodes  in  tne  net.  It  is 
assumed  that  upon  completion  of  firing,  the  tokens 
immediately  enter  their  associated  output  places.  Therefore, 
the  arrival  process  may  be  characterized  as: 


Beflnltion  3.13  Tne  arrival  rate  f,; 
given  by: 


H-2  r,' 

J«l  i 


’ Jl . 


for  a  place 


where  £*y  is  the  arrival  rate  for  node  n j ,  bji  is 
branching  probability  that  a  departure  from  node 
arrives  at  node  ny,  and  m  is  the  rant  of  [n] . 


is 


the 


n; 


* 


-r 


0 
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Note  teat  we  nave  not  specified  tne  arrival  distribution 
itself.  It  nas  been  snovn  by  Burhe's  theorem  (42J  and 
several  extensions  (for  example  [3J  ) ,  tnat  in  many  cases  tne 
arrival  process  is  asymptotically  Poisson. 

To  summarize,  we  nave  made  tne  following  assumptions 
concerning  the  petri  net  state  transition  process: 

1.  Firing  times  are  independent. 

2.  Flrin*  times  are  continuous  and  exponentially 

distributed. 

3.  The  queueln*  discipline  is  worn  conserving. 

4.  Nondeterminlstlc  transitions  between  nodes  are 

determined  by  constant  branching  probabilities. 

5.  There  is  no  overhead  in  transition  firings; 
transitions  fire  whenever  enabled. 

In  Section  II  we  considered  the  class  of  state  machine 
decomposable  nets  and  state  macnines.  Figure  3.3  is  an 
example  of  such  a  net  with  its  associated  nodes. 

Theorem  3.3  Each  node  in  a  state  machine  contains  exactly 
one  place. 

Proof.  By  definition,  each  transition  has  a  single  input 
place.  Trivially  then,  there  must  be  at  least  one  place 
in  each  node.  Without  loss  of  generality,  assume  tnere 
exists  a  node  with  two  places  p{  and  p?  with  tt-  £  p («  .  By 
Implication,  pa*  and  therefore  Paj^*tc'  in 
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contradiction  with  tne  definition  of  a  node.  Therefore, 


there  is  at  most  one  place  in  each  node.  QED. 

The  next  result  follows  immediately: 

Corollary  3.3.1  The  places  in  a  state  machine  are 
free-choice . 


Since  tne  places  are  free-choice,  it  is  possible  to 
assign  tne  brancning  probabilities  to  tne  output 
transitions.  These  transitions  are  not  multiple  servers, 
rather,  they  represent  the  possibility  for  tokens  whlcn  must 
be  handled  differently.  It  is  necessary  therefore,  to  create 
composite  places  to  deal  with  this  requirement.  The 
resulting  net  we  call  the  stochastic  equivalent  petrl  net 
(SEN). 


Definition  3.14  The  stochastic  equivalent  net  for  a  petri 
net  M  is  constructed  as  follows: 

for  every  place  p  in  P,  assign  a  set  (TT,  ,7Ta»  •  •  •  ,?Tn> 
where  n  « Jp^j  ,  VtK  €  T  I(TTj,tk)  *  I(p£.tj),  and  if 
Pi*  *  It,  ,ta,...,t„) 


0(TTj,tK) 


0(?i, .  ,) 

0  otherwise 


la  the  associated  graph,  each  edge  from  a  transition  in  «p; 
to  the  set  ilf,  ,‘TTa» . . .  >  is  Joined  by  an  arc  and  labeled 
with  the  appropriate  branching  probability. 
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The  SEN  for  the  petrl  net  In  Figure  3.3  is  depicted  in 
Figure  3.4.  Eacn  node  in  tne  SEN  consists  of  a  single  place 
and  transition,  with  tne  branching  probabilities  occurring 
at  the  output  from  tne  transitions.  It  is  clear  from  the 
definition  that  the  SEN  has  the  same  properties  of 
boundedness,  llxeness,  and  consistency  as  tne  associated 
petri  net. 

It  is  now  possible  to  obtain  the  analytic  solution  for 
tne  petrl  net  by  treating  is  as  a  closed  queueing  network. 

Theorem  3.4  The  SEN  for  a  state  machine  with  a  live 
marling  is  ergodlc. 

Proof.  By  theorem  2.12,  a  state  machine  is  bounded  and 
therefore  tne  state  space  (reachability  set)  is  finite. 
Lien  has  shown  [43,  thm  11J  that  the  state  space  for 
this  class  is  strongly  connected.  Therefore,  the  state 
space  is  irreducible.  Since  it  is  finite,  tne 
probability  of  reaching  some  state,  PLO,-J,  is  greater 
taan  zero.  Therefore  tne  state  space  is  recurrent  and 
non-null.  By  definition  therefore,  the  state  space  is 
ergodlc  and  likewise  the  SEN  is  ergodlc. 

Thus,  equilibrium  state  probabilities  exist  for  tne  system; 
that  is, 

P[CJ  -  11m  P[U,rJ 
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This  type  of  system  was  solved  by  Gordon  and  Newell  [30 J  .  At 
equilibrium,  tae  derivative  d/lT( P[U,TJ )  must  vanisa  for 
each  state  In  tbe  state  space.  Tnis  allows  tne  elobal 
balance  equations  for  tne  system  to  be  written.  For  some 
state  (J[  ,  tne  rate  of  chanee  of  probability  is  determined  by 
tbe  rate  of  flow  of  probability  into  the  state  due  to 
arrivals  and  the  rate  of  flow  of  probability  from  tne  state 
due  to  departures.  This  may  be  written  as: 

d/dT  (P[U,T)J  *  P  [  ( u ,  ,ua, . ..  .u*  J  )  Z8(ut)«jU.i  - 

Z  Z  8Ui  •HtUj.ttj . Uj-l . U-+1,  ...,u„)] 

*  0 

where  §( u ^ )  is  the  unit  step  function  given  by 

0  if  u;  *  0 
1  otherwise 

These  equations  may  be  solved  directly  to  within  a  constant 
which  may  be  determined  by  addlne  the  requirement  tnat 

Z  p[o- j  *  i 

The  product  form  solution  to  these  equations  is  [30 J 
p[0)  *  P[(u,,ua . Uh)J  *  U/G(K)}  n  ^ 

4»« 

where  K  »  N(O)  and  tne  x^  are  solutions  to  equations 

a 

JUL^»X^  *  2  jULj’Xj ^ ji  (lalf2t ...  ,n ) . 

The  normalization  constant  G(K)  is  given  by 

G(S)  -  T  f[  x? 

U  (.<( 

Algorithms  have  been  found  for  computing  G(K)  and  the  x; 
[42]. 
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D.  OPEN  PETRI  NBT  SYSTEMS 

Since  tne  SEN  for  a  state  machine  has  been  snown  to  be 
equivalent  to  closed  networks  of  queues,  tne  question  arises 
as  to  whether  petrl  nets  can  be  defined  which  are  analogous 
to  open  networks.  Sucn  a  system  may  model  tne  occurrence  of 
external  events  such  as  the  arrival  of  Interrupts. 
Alternatively,  tne  model  may  represent  a  communications 
system  where  messages  enter  and  are  removed  from  tne  system 
at  various  points.  To  incorporate  tnese  external  events, 
Definition  2.1  may  be  extended  as  follows: 

Definition  3.15  An  open  marked  petri  net  OM  is  a  marked 

petrl  net  where 

T  i  *  <$>  <=*>  t^  is  a  source 

tj*  <->  tt'  is  a  sink 

It  is  assumed  tnat  tnese  transitions  may  source  or  sink  an 
infinite  number  of  tokens.  The  flrin*  rates  are  defined 
as  before  except  that  y C  -  is  the  mean  arrival  rate  for 
source  . 

The  possibility  of  external  arrivals  requires  a 
modification  of  the  earlier  arrival  process  definition. 

Definition  3.16  The  arrival  rate  P-  for  a  node  is  *lven  by 

r.-y.-iTjOj. 

J«l  i 

It  can  be  seen  that  Definition  3.13  is  a  special  case 
wnere  '^’*6  for  1  *  1,2,. ..,n. 
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Several  observations  can  be  made  concerning  the  ways  in 
whlcn  tbe  properties  of  liveness,  boundedness,  and 
consistency  are  affected  by  tne  addition  of  sources  and 
sinics.  First,  consider  tne  case  of  marked  grapns.  Recall 
tnat  for  a  marked  eraph,  eacn  place  is  conflict  free.  Figure 
3.5(a)  snows  part  of  a  marked  graph.  To  meet  the  conflict 
free  requirement,  source  and  sink  transitions  can  be  added 
to  the  net  only  at  existing  transitions  (with  intervening 
places  being  added).  In  Figure  3.5(b),  a  source  transition 
stl  has  been  aided  at  transition  tg  and  in  Fleure  3.5(c),  a 
sink  transition  st2  has  been  added  at  transition  t^. 

Theorem  3.5  Liveness  in  marked  grapns  is  unaffected  by  tne 
addition  of  source  or  sink  transitions. 

Proof.  By  definition,  a  source  transition  is  live,  and 
therefore  liveness  is  unaffected  by  the  addition  of  a 
source.  Now  consider  a  transition  in  tne  net  t^  with  a 
sink  transi tion/place  pair  added  to  the  output.  If  t^  is 
live,  it  can  be  fired  by  some  sequence  which  will  then 
enable  the  sink  transition?  therefore,  tne  sink 
transition  is  live  and  liveness  is  conserved. 

Theorem  3.6  A  marked  graph  remains  bounded  after  addition 
of  source  and  sink  transitions  except  in  tbe  places 
associated  with  those  transitions. 
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figure  3.5  Addition  of  source  and  sink  transitions  to  petrl  nets, 
(a)  marked  eraph.  (b)  marked  graph  with  source  stl.  (c)  marced 
grapn  with  sink  st2.  (d)  state  machine  net  with  sources  and  sines 
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Tfiis  result  is  clearly  true  by  tbe  definition  of  transition 
firing.  It  snoull  be  noted  tnat  the  general  results  of 
queuein*  theory  require  that  tne  places  associated  with  the 
source  and  sink  transitions  be  unbounded  (if  exponential 
arrivals  and  departures  are  assumed). 

In  terms  of  the  dynamic  operation  of  marked  graphs,  it 
can  be  seen  from  Figure  3.5  tnat  the  existence  of  sink 
transitions  has  no  effect.  The  source  transitions  operate  by 
controlling  tne  enabling  of  the  net  transitions  to  which 
they  are  connected;  tney  set  an  upper  bound  on  tne  firing 
rate  of  the  transition. 

In  tne  case  of  state  macnines,  tne  source  and  sink 
transitions  are  added  to  eiistin*  places  in  the  net  (see 
Figure  3.5(d)).  Tne  nondeterministlc  nature  of  state 
machines  results  in  changes  to  the  properties  of  the  net 
after  tne  Addition  of  tne  sources  and  sinks.  For  example,  if 
a  sink  transition  is  aided  to  a  live  state  machine,  the  net 
cruirf  eventually  terminate  since  the  sink  must  eventually 
become  er.afc.iM  resulting  in  the  loss  of  a  token  to  tne 
system.  ¥*en  sources  are  added,  the  net  will  become  become 
unfounded.  Since  tne  source  can  be  fired  arbitrarily  often, 
the  token  count  of  the  output  place  to  tne  source  can  become 
arbit  arliy  large . 

ly  generalizing  the  closed  network  queueing  model 
developed  in  tne  previous  section,  tne  solution  for  state 
machines  with  sources  and  sinks  may  be  obtained.  Once  again. 


85 


▼ 


the  net  is  transformed  Into  its  stocnastlc  equivalent.  A 
sink  is  added  to  a  node  J  by  adjusting  tne  brancblng 
probabilities  of  tne  transitions  in  j  so  that  tne 
probability  of  departure  from  tne  system  at  node  J,  P[d  J, 
obeys: 

P[d]  ■  1  -  £  b:t‘  wnere  n  is  ItM. 

A  source  is  added  to  node  j  by  inserting  an  edee  directed 
Into  tne  place  in  J  and  labeled  with  tne  mean  arrival  rate. 

Since  it  is  possible  for  the  net  to  become  unbounded 
after  adding  sources  and  sinks,  it  is  necessary  to  require 
that  Ij  <  fJlj  for  every  node  in  the  SEN  to  ensure  that  the 
net  remains  ergodlc. 

Once  acaln,  the  solution  Involves  writing  tne  global 
balance  equations  for  the  system,  i.e.: 

Vflj  P[0tJ  (rate  of  flow  from  into  Uj  ) 

*  P[Uy]  (rate  of  flow  out  of  Uj  ) 

Basket  [32]  has  shown  tnat  the  general  product  form  solution 
for  this  system  is  of  the  form 

P[0]  *  Cd(0)f,  (ul)fa(u3)...f0(un) 

where  C  is  the  normalization  constant  needed  to  ensure 

£  *  i  . 

t»l 

d(O)  is  an  expression  for  the  exogenous  arrival 

rate, 

d(tJ)  mIjyifor  Poisson  arrivals  at  constant  ratey,;, 
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and  (ut- )  is  a  function  of  tne  queue  discipline. 

For  FCFS,  f  ^  (u  ^ )  =  1/u.i  fir  -ULV 

j  \  p-i] 

g.  CONSISTENT  PSTHI  NET  SISTEMS 

Tne  most  general  petri  net  class  we  consider  is  tnat  of 
lire,  bounded,  and  consistent  nets.  Tne  solution  to  tnis 
class  proceeds  Identically  to  tnat  used  earlier.  Tne  net  is 
first  transformed  into  its  stocnastic  equivalent  net  rorm  by 
tne  mettod  of  Definition  3.13.  Figure  3.6(a)  snows  bow  an 
arbitrary  node  in  tne  petri  net  is  transformed.  Note  tnat  in 
the  resulting  node  12,  two  places  are  required  as  input  to 
transition  t^  and  therefore  tnis  node  does  not  model  tne 
simple  queue/serrer  pair  wnlcn  was  seen  earlier  for  state 
macnlnes.  Another  possibility  for  a  SEN  node  is  tnat  tne 
transition  has  multiple  outputs  witn  branching  probabilities 
bij-  all  equal  to  1.  Tnese  two  situations  are  shown  in  Figure 
3.6(b).  It  has  been  shown  (44j  that  these  types  of  nodes 
(also  referred  to  as  Join  and  fort  nodes)  do  not  satisfy 
local  balance  and  therefore  product  form  solutions  do  not 
exist  for  this  class  of  nets.  However,  since  the  net  Is 
bounded,  by  the  results  of  Cnapter  II  the  reachability  set 
(and  state  space)  is  finite  and  therefore  the  elobal  state 
equations  can  be  solved  numerically  [45J . 

In  the  case  of  consistent  nets  with  sources  and  slnics, 
it  is  possible  for  the  net  to  become  unbounded  since  the 
sources  may  fire  arbitrarily  often  and  therefore  finding  the 
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solution  to  the  global  balance  equations  becomes 
Intractable.  In  tnis  case,  approximation  tecnnlques  sucn  as 
aggregation  or  tbe  diffusion  approximation  146]  must  be 
resorted  to.  Tne  applicability  of  tnese  tecnnlques  to  petrl 
nets  is  an  open  question,  but  one  which  nas  the  potential  to 
extend  the  modeling  power  of  petrl  nets  to  more  interesting 
systems. 
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IV.  CONCLUSIONS 


Tills  tnesis  nas  addressed  me  problem  of  computer  system 
performance  analysis  tnrough  the  use  of  the  petri  net  model. 
The  model  has  wide  applicability  to  tne  analysis  of  both 
hardware  and  software  systems,  particularly  those  which 
exhibit  concurrency  or  asynchronous  operation.  Due  to  tne 
power  of  tne  petri  net  approach,  it  is  necessary  to  restrict 
the  structure  of  the  nets  resulting  in  a  hierarchical  class 
relationship  between  petri  net  types. 

The  classes  of  greatest  interest  in  system  modeling  are 
marked  grapns,  state  macnines,  and  consistent  nets.  All 
three  of  these  classes  were  Shown  to  have  the  properties  of 
boundedness,  liveness,  and  consistency  which  are  useful  in 
the  verification  of  computer  system  correctness.  Of  tne 
three  classes,  the  class  of  consistent  nets  Is  the  most 
useful  in  modeling  in  tnat  it  can  represent  the  greatest 
ranee  of  possible  systems  —  and  is  also  the  most  difficult 
to  analyze  mathematically. 

It  was  seen  that  the  general  problem  of  reachability, 
and  the  set  of  states  in  which  a  marked  petri  net  could 
enter,  was  a  primary  consideration  in  the  analysis  of  tne 
nets.  In  particular,  an  algorithm  was  presented  for 
determining  tie  state  space  for  the  class  of  bounded  petri 
nets. 
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By  defining  the  firing  times  for  the  transitions  in  the 
net,  it  was  possible  to  extend  tne  analysis  of  petrl  nets  to 
their  dynamic  execution.  Random  firing  times  allowed  tne 
nets  ta  model  lata  dependent  events.  This  concept  led  to  the 
identification  of  nondeterminism  in  tne  petri  net  execution. 

Petri  nets  with  random  firing  times  were  shown  to  be 
analogous  to  closed  queueing  networks.  A  major  difficulty  in 
this  approach  is  the  inability  to  model  queueing  disciplines 
in  the  places.  However,  if  exponential  firing  is  assumed, 
tne  analysis  can  be  conducted  without  detailed  knowledge  of 
the  structure  of  the  queue.  In  this  context,  the  stochastic 
equivalent  net  was  introduced  as  a  method  for  demonstrating 
the  correspondence  between  petri  nets  and  queueing  networks. 
This  permitted  tae  state  probabilities  to  be  determined 
through  the  known  techniques  of  queueing  theory. 

The  definition  of  petri  nets  was  extended  to  allow  for 
events  which  take  place  external  to  tne  system  itself. 
Again,  the  resulting  stochastic  equivalent  net  corresponds 
to  a  queueing  network  —  in  tnis  case  tne  open  network 
model . 

It  appears  tnat  tnis  approacn  to  petri  net  modeling  can 
utilize  more  of  the  recent  results  of  queueing  network 
tneory.  Tor  example,  solutions  nave  been  found  for  state 
dependent  routing  (branching)  probabilities,  and  state 
dependent  arrival  and  departure  rates.  Additional  work  is 
required  to  determine  if  tne  use  of  petri  net  based 


stochastic  models  simplifies  the  problem  of  reducing  system 
design  criteria  and  parameters  to  a  form  vnicn  permits  tne 
application  of  queueing  network  techniques. 
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LIST  0?  NOTATION 

probability  that  transition  J  will  fire  riven 

tnat  place  i  enables  transitions  t(,t2,...,tn 
input  incidence  matrix  for  a  petri  net 
output  incidence  matrix  for  a  petri  net 
tbe  set  of  edges  in  a  marked  eraph  between 
transitions  1  and  j 

a  current  assignment  for  a  transition  in  a 
consistent  net 

tne  firing  function  for  a  transition  t  and 
state  0  in  a  petri  net 
tne  total  mean  arrival  rate  at  node  i 
the  input  function  for  place  p  and  transition  t 
a  marked  petri  net  <P,T,I,0,jU> 
a  marked  graph  <T',E', fX> 
tne  marking  function  for  a  marked  petri  net 
(section  2) 

the  mean  firing  rate  for  transition  i  (sec  3) 

a  petri  net  <P,T»If0> 

tne  token  count  for  a  set  of  places  P 

tne  output  function  for  place  p  and  transition  t 

tne  set  of  places  in  a  petri  net 

a  composite  place  in  a  stochastic  equivalent  net 
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a.  b 


0 ( fi )  tne  reacnabllity  set  (space  state)  for 

petri  net  M 

H(F)  tne  reacnabllity  set  for  a  vector  addition 

system  V 

tne  computation  rate  for  a  discrete  time  petri  net 
a  firing  sequence  ( t,  ,  tzf . * .  ,t„) 

SK  toe  enabling  set  { t,  ,  ta, . .  * » t„}  enabled  by 

marking  fJ.K 

S(x)  the  transition  firing  time  distribution 

s(x)  tne  transition  firing  time  density  fuctlon 

T  tne  set  of  transitions  in  a  petri  net 

tne  state  of  a  petri  net  (u,  ,u4, .. .  ,u„)  wltn 
marking  fX^ 

V  a  vector  addition  system  <dfV> 

W  tne  vectnr  set  in  a  vector  addition  system 
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